<!DOCTYPE html>
<html lang="zh-CN">
<head>
  <meta charset="UTF-8">
<meta name="viewport" content="width=device-width">
<meta name="theme-color" content="#222"><meta name="generator" content="Hexo 7.3.0">

  <link rel="apple-touch-icon" sizes="180x180" href="/images/apple-touch-icon-next.png">
  <link rel="icon" type="image/png" sizes="32x32" href="/images/favicon-32x32.ico">
  <link rel="icon" type="image/png" sizes="16x16" href="/images/favicon-16x16.ico">
  <link rel="mask-icon" href="/images/logo.svg" color="#222">

<link rel="stylesheet" href="/css/main.css">



<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css" integrity="sha256-wiz7ZSCn/btzhjKDQBms9Hx4sSeUYsDrTLg7roPstac=" crossorigin="anonymous">
  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/animate.css/3.1.1/animate.min.css" integrity="sha256-PR7ttpcvz8qrF57fur/yAx1qXMFJeJFiA6pSzWi0OIE=" crossorigin="anonymous">
  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/fancyapps-ui/5.0.28/fancybox/fancybox.css" integrity="sha256-6cQIC71/iBIYXFK+0RHAvwmjwWzkWd+r7v/BX3/vZDc=" crossorigin="anonymous">
  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/pace/1.2.4/themes/green/pace-theme-minimal.css">
  <script src="https://cdnjs.cloudflare.com/ajax/libs/pace/1.2.4/pace.min.js" integrity="sha256-gqd7YTjg/BtfqWSwsJOvndl0Bxc8gFImLEkXQT8+qj0=" crossorigin="anonymous"></script>

<script class="next-config" data-name="main" type="application/json">{"hostname":"sumumm.github.io","root":"/","images":"/images","scheme":"Gemini","darkmode":false,"version":"8.19.2","exturl":false,"sidebar":{"position":"left","display":"post","padding":18,"offset":12},"copycode":{"enable":true,"style":"mac"},"fold":{"enable":true,"height":300},"bookmark":{"enable":false,"color":"#222","save":"auto"},"mediumzoom":false,"lazyload":true,"pangu":false,"comments":{"style":"tabs","active":null,"storage":true,"lazyload":false,"nav":null},"stickytabs":false,"motion":{"enable":true,"async":true,"transition":{"menu_item":"fadeInDown","post_block":"fadeIn","post_header":"fadeInDown","post_body":"fadeInDown","coll_header":"fadeInLeft","sidebar":"fadeInUp"}},"i18n":{"placeholder":"搜索...","empty":"没有找到任何搜索结果：${query}","hits_time":"找到 ${hits} 个搜索结果（用时 ${time} 毫秒）","hits":"找到 ${hits} 个搜索结果"},"path":"/search.xml","localsearch":{"enable":true,"trigger":"auto","top_n_per_article":1,"unescape":false,"preload":false}}</script><script src="/js/config.js"></script>

    <meta name="description" content="本文主要是天猫精灵IOT Smart config—— SmartConfig抓包分析相关笔记，若笔记中有错误或者不合适的地方，欢迎批评指正😃。">
<meta property="og:type" content="article">
<meta property="og:title" content="LV02-01-天猫精灵IOT-07-SmartConfig-02-SmartConfig抓包分析">
<meta property="og:url" content="https://sumumm.github.io/post/20e461a1.html">
<meta property="og:site_name" content="苏木">
<meta property="og:description" content="本文主要是天猫精灵IOT Smart config—— SmartConfig抓包分析相关笔记，若笔记中有错误或者不合适的地方，欢迎批评指正😃。">
<meta property="og:locale" content="zh_CN">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219121752582.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219122208782.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219122409555.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219123304844.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219123400149.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219123550964.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219123941127.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221635784.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219124834992.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219125348899.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221726938.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219125930807.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221758836.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219130314255.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221830583.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219130557461.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219131058393.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221917411.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219131438036.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219222123867.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219222803843.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219223039760.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219223338720.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219223503649.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219223952467.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219225250321.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219225821054.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219230719632.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219230941281.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231201273.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231126893.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231319816.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231341838.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231627171.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231558890.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232113359.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232218345.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232322933.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232444261.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232838960.png">
<meta property="og:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219233120730.png">
<meta property="article:published_time" content="2023-12-22T14:28:27.000Z">
<meta property="article:modified_time" content="2025-06-13T16:25:57.026Z">
<meta property="article:author" content="苏木">
<meta property="article:tag" content="LV21-天猫精灵IOT">
<meta name="twitter:card" content="summary">
<meta name="twitter:image" content="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219121752582.png">


<link rel="canonical" href="https://sumumm.github.io/post/20e461a1.html">



<script class="next-config" data-name="page" type="application/json">{"sidebar":"","isHome":false,"isPost":true,"lang":"zh-CN","comments":true,"permalink":"https://sumumm.github.io/post/20e461a1.html","path":"post/20e461a1.html","title":"LV02-01-天猫精灵IOT-07-SmartConfig-02-SmartConfig抓包分析"}</script>

<script class="next-config" data-name="calendar" type="application/json">""</script>
<title>LV02-01-天猫精灵IOT-07-SmartConfig-02-SmartConfig抓包分析 | 苏木</title>
  








    <script src="/js/browser_tools_disable.js"></script>

  <noscript>
    <link rel="stylesheet" href="/css/noscript.css">
  </noscript>
<!-- hexo injector head_end start --><link rel="stylesheet" href="https://unpkg.com/hexo-next-tags-plus@latest/lib/tag_plus.css" media="defer" onload="this.media='all'"><!-- hexo injector head_end end --></head>

<body itemscope itemtype="http://schema.org/WebPage" class="use-motion">
  <div class="headband"></div>

  <main class="main">
    <div class="column">
      <header class="header" itemscope itemtype="http://schema.org/WPHeader"><div class="site-brand-container">
  <div class="site-nav-toggle">
    <div class="toggle" aria-label="切换导航栏" role="button">
        <span class="toggle-line"></span>
        <span class="toggle-line"></span>
        <span class="toggle-line"></span>
    </div>
  </div>

  <div class="site-meta">

    <a href="/" class="brand" rel="start">
      <i class="logo-line"></i>
      <p class="site-title">苏木</p>
      <i class="logo-line"></i>
    </a>
      <p class="site-subtitle" itemprop="description">我的学习之路</p>
  </div>

  <div class="site-nav-right">
    <div class="toggle popup-trigger" aria-label="搜索" role="button">
        <i class="fa fa-search fa-fw fa-lg"></i>
    </div>
  </div>
</div>



<nav class="site-nav">
  <ul class="main-menu menu"><li class="menu-item menu-item-home"><a href="/" rel="section"><i class="fa fa-home fa-fw"></i>苏木的家</a></li><li class="menu-item menu-item-categories"><a href="/categories/" rel="section"><i class="fa fa-th fa-fw"></i>分类页<span class="badge">42</span></a></li><li class="menu-item menu-item-archives"><a href="/archives/" rel="section"><i class="fa fa-archive fa-fw"></i>归档页<span class="badge">673</span></a></li><li class="menu-item menu-item-flink"><a href="/flink/" rel="section"><i class="fa fa-link fa-fw"></i>友人帐</a></li><li class="menu-item menu-item-about"><a href="/about/" rel="section"><i class="fa fa-user fa-fw"></i>关于我</a></li>
      <li class="menu-item menu-item-search">
        <a role="button" class="popup-trigger"><i class="fa fa-search fa-fw"></i>搜索
        </a>
      </li>
  </ul>
</nav>



  <div class="search-pop-overlay">
    <div class="popup search-popup"><div class="search-header">
  <span class="search-icon">
    <i class="fa fa-search"></i>
  </span>
  <div class="search-input-container">
    <input autocomplete="off" autocapitalize="off" maxlength="80"
           placeholder="搜索..." spellcheck="false"
           type="search" class="search-input">
  </div>
  <span class="popup-btn-close" role="button">
    <i class="fa fa-times-circle"></i>
  </span>
</div>
<div class="search-result-container no-result">
  <div class="search-result-icon">
    <i class="fa fa-spinner fa-pulse fa-5x"></i>
  </div>
</div>

    </div>
  </div>

</header>
        
  
  <aside class="sidebar">

    <div class="sidebar-inner sidebar-nav-active sidebar-toc-active">
      <ul class="sidebar-nav">
        <li class="sidebar-nav-toc">
          文章目录
        </li>
        <li class="sidebar-nav-overview">
          站点概览
        </li>
      </ul>

      <div class="sidebar-panel-container">
        <!--noindex-->
        <div class="post-toc-wrap sidebar-panel">
            <div class="post-toc animated"><ol class="nav"><li class="nav-item nav-level-1"><a class="nav-link" href="#%E4%B8%80%E3%80%81WiFi%E4%B8%8D%E9%85%8D%E7%BD%AE%E5%AF%86%E7%A0%81"><span class="nav-text">一、WiFi不配置密码</span></a><ol class="nav-child"><li class="nav-item nav-level-2"><a class="nav-link" href="#1-%E8%B7%AF%E7%94%B1%E5%99%A8%E9%85%8D%E7%BD%AE"><span class="nav-text">1. 路由器配置</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#2-OmniPeek%E8%AE%BE%E7%BD%AE"><span class="nav-text">2. OmniPeek设置</span></a><ol class="nav-child"><li class="nav-item nav-level-3"><a class="nav-link" href="#2-1-channel%E9%85%8D%E7%BD%AE"><span class="nav-text">2.1 channel配置</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#2-2-%E8%BF%87%E6%BB%A4%E5%99%A8"><span class="nav-text">2.2 过滤器</span></a></li></ol></li><li class="nav-item nav-level-2"><a class="nav-link" href="#3-%E6%89%8B%E6%9C%BA%E6%93%8D%E4%BD%9C"><span class="nav-text">3. 手机操作</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#4-%E6%95%B0%E6%8D%AE%E5%8C%85%E5%88%86%E6%9E%90"><span class="nav-text">4. 数据包分析</span></a><ol class="nav-child"><li class="nav-item nav-level-3"><a class="nav-link" href="#4-1-%E8%B5%B7%E5%A7%8B%E5%B8%A7%EF%BC%9A1314"><span class="nav-text">4.1 起始帧：1314</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-2-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A333"><span class="nav-text">4.2 数据帧：333</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-3-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A465"><span class="nav-text">4.3 数据帧：465</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-4-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A583"><span class="nav-text">4.4 数据帧：583</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-5-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A706"><span class="nav-text">4.5 数据帧：706</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-6-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A902"><span class="nav-text">4.6 数据帧：902</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-7-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A1038"><span class="nav-text">4.7 数据帧：1038</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-8-%E6%80%BB%E7%BB%93"><span class="nav-text">4.8 总结</span></a></li></ol></li></ol></li><li class="nav-item nav-level-1"><a class="nav-link" href="#%E4%BA%8C%E3%80%81WiFi%E9%85%8D%E7%BD%AE%E5%AF%86%E7%A0%81"><span class="nav-text">二、WiFi配置密码</span></a><ol class="nav-child"><li class="nav-item nav-level-2"><a class="nav-link" href="#1-%E8%B7%AF%E7%94%B1%E5%99%A8%E8%AE%BE%E7%BD%AE"><span class="nav-text">1. 路由器设置</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#2-OmniPeek%E8%AE%BE%E7%BD%AE-1"><span class="nav-text">2. OmniPeek设置</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#3-%E6%89%8B%E6%9C%BA%E6%93%8D%E4%BD%9C-1"><span class="nav-text">3. 手机操作</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#4-%E6%95%B0%E6%8D%AE%E5%8C%85%E5%88%86%E6%9E%90-1"><span class="nav-text">4. 数据包分析</span></a><ol class="nav-child"><li class="nav-item nav-level-3"><a class="nav-link" href="#4-1-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A362"><span class="nav-text">4.1 数据帧：362</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-2-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A485"><span class="nav-text">4.2 数据帧：485</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-3-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A603"><span class="nav-text">4.3 数据帧：603</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-4-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A737"><span class="nav-text">4.4 数据帧：737</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-5-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A922"><span class="nav-text">4.5 数据帧：922</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-6-%E6%95%B0%E6%8D%AE%E5%B8%A7%EF%BC%9A1058"><span class="nav-text">4.6 数据帧：1058</span></a></li><li class="nav-item nav-level-3"><a class="nav-link" href="#4-7-%E6%80%BB%E7%BB%93"><span class="nav-text">4.7 总结</span></a></li></ol></li></ol></li></ol></div>
        </div>
        <!--/noindex-->

        <div class="site-overview-wrap sidebar-panel">
          <div class="site-author animated" itemprop="author" itemscope itemtype="http://schema.org/Person">
    <img class="site-author-image" itemprop="image" alt="苏木"
      src="/images/avatar.jpg">
  <p class="site-author-name" itemprop="name">苏木</p>
  <div class="site-description" itemprop="description">莫道桑榆晚，为霞尚满天</div>
</div>
<div class="site-state-wrap animated">
  <nav class="site-state">
      <div class="site-state-item site-state-posts">
        <a href="/archives/">
          <span class="site-state-item-count">673</span>
          <span class="site-state-item-name">日志</span>
        </a>
      </div>
      <div class="site-state-item site-state-categories">
          <a href="/categories/">
        <span class="site-state-item-count">42</span>
        <span class="site-state-item-name">分类</span></a>
      </div>
      <div class="site-state-item site-state-tags">
        <span class="site-state-item-count">43</span>
        <span class="site-state-item-name">标签</span>
      </div>
  </nav>
</div>
  <div class="links-of-author animated">
      <span class="links-of-author-item">
        <a href="https://github.com/sumumm" title="GitHub → https:&#x2F;&#x2F;github.com&#x2F;sumumm" rel="noopener me" target="_blank"><i class="fab fa-github fa-fw"></i>GitHub</a>
      </span>
  </div>

        </div>
      </div>
    </div>

    
  </aside>


    </div>

    <div class="main-inner post posts-expand">


  


<div class="post-block">
  
  

  <article itemscope itemtype="http://schema.org/Article" class="post-content" lang="zh-CN">
    <link itemprop="mainEntityOfPage" href="https://sumumm.github.io/post/20e461a1.html">

    <span hidden itemprop="author" itemscope itemtype="http://schema.org/Person">
      <meta itemprop="image" content="/images/avatar.jpg">
      <meta itemprop="name" content="苏木">
    </span>

    <span hidden itemprop="publisher" itemscope itemtype="http://schema.org/Organization">
      <meta itemprop="name" content="苏木">
      <meta itemprop="description" content="莫道桑榆晚，为霞尚满天">
    </span>

    <span hidden itemprop="post" itemscope itemtype="http://schema.org/CreativeWork">
      <meta itemprop="name" content="LV02-01-天猫精灵IOT-07-SmartConfig-02-SmartConfig抓包分析 | 苏木">
      <meta itemprop="description" content="">
    </span>
      <header class="post-header">
        <h1 class="post-title" itemprop="name headline">
          LV02-01-天猫精灵IOT-07-SmartConfig-02-SmartConfig抓包分析
        </h1>

        <div class="post-meta-container">
          <div class="post-meta">
    <span class="post-meta-item">
      <span class="post-meta-item-icon">
        <i class="far fa-calendar"></i>
      </span>
      <span class="post-meta-item-text">发表于</span>

      <time title="创建时间：2023-12-22 22:28:27" itemprop="dateCreated datePublished" datetime="2023-12-22T22:28:27+08:00">2023-12-22</time>
    </span>
    <span class="post-meta-item">
      <span class="post-meta-item-icon">
        <i class="far fa-folder"></i>
      </span>
      <span class="post-meta-item-text">分类于</span>
        <span itemprop="about" itemscope itemtype="http://schema.org/Thing">
          <a href="/categories/%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/" itemprop="url" rel="index"><span itemprop="name">嵌入式开发</span></a>
        </span>
          ，
        <span itemprop="about" itemscope itemtype="http://schema.org/Thing">
          <a href="/categories/%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/" itemprop="url" rel="index"><span itemprop="name">01HQ课程体系</span></a>
        </span>
          ，
        <span itemprop="about" itemscope itemtype="http://schema.org/Thing">
          <a href="/categories/%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/" itemprop="url" rel="index"><span itemprop="name">LV21-天猫精灵IOT</span></a>
        </span>
    </span>

  
    <span class="post-meta-break"></span>
    <span class="post-meta-item" title="本文字数">
      <span class="post-meta-item-icon">
        <i class="far fa-file-word"></i>
      </span>
      <span class="post-meta-item-text">本文字数：</span>
      <span>8.1k</span>
    </span>
    <span class="post-meta-item" title="阅读时长">
      <span class="post-meta-item-icon">
        <i class="far fa-clock"></i>
      </span>
      <span class="post-meta-item-text">阅读时长 &asymp;</span>
      <span>29 分钟</span>
    </span>
</div>

        </div>
      </header>

    
    
    
    <div class="post-body" itemprop="articleBody"><p>本文主要是天猫精灵IOT Smart config—— SmartConfig抓包分析相关笔记，若笔记中有错误或者不合适的地方，欢迎批评指正😃。</p>
<span id="more"></span>

<!-- Photo: https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/ -->

<details class="folding-tag" blue><summary> 点击查看使用工具及版本 </summary>
              <div class='content'>
              <table>    <tr>        <td align="center" width=150px>Windows版本</td>        <td align="left">windows11</td>    </tr>    <tr>        <td align="center">Ubuntu版本</td>        <td align="left">Ubuntu22.04的64位版本</td>      </tr>    <tr>        <td align="center">VMware® Workstation 16 Pro</td>        <td align="left">16.2.3 build-19376536</td>      </tr>    <tr>        <td align="center">终端软件</td>        <td align="left">MobaXterm(Professional Edition v23.0 Build 5042 (license))</td>      </tr></table>
              </div>
            </details>

<details class="folding-tag" blue><summary> 点击查看本文参考资料 </summary>
              <div class='content'>
              <table>    <tr>        <td align="center">分类</td>        <td align="center">网址</td>        <td align="center">说明</td>    </tr>    <tr>        <td align="center" rowspan="6">官方网站</td>        <td align="left"><a href="https://cn.aliyun.com/" target="_blank">阿里云</a></td>        <td align="left">阿里云官网主页</td>    </tr>    <tr>        <td align="left"><a href="https://www.aliyun.com/product/iot/livinglink?spm=5176.28508143.J_4VYgf18xNlTAyFFbOuOQe.317.5421154acZniIL&scm=20140722.X_data-1da961ea118f5bb0e4b2._.V_1" target="_blank">阿里生活物联平台</a></td>        <td align="left">生活物联网平台(飞燕平台)主页</td>    </tr>    <tr>        <td align="left"><a href="https://iap.aligenie.com/?spm=0.7629140.0.0.2c611780Ty6tzg" target="_blank">AliGenie</a></td>        <td align="left">天猫精灵开放平台AliGenie主页</td>    </tr>    <tr>        <td align="left"><a href="https://www.aliyun.com/product/iot/iot_instc_public_cn?spm=5176.28508143.J_4VYgf18xNlTAyFFbOuOQe.81.5421154au3ocqp&scm=20140722.X_data-9349178ba84cf028806a._.V_1" target="_blank">阿里物联网平台</a></td>        <td align="left">阿里物联网平台主页</td>    </tr>    <tr>        <td align="left"><a href="https://www.bluetooth.com/zh-cn/" target="_blank">Bluetooth 技术网站</a></td>        <td align="left">蓝牙协议规范什么的可以来这里找</td>    </tr>    <tr>        <td align="left"><a href="https://www.telink-semi.com/" target="_blank">Telink</a></td>        <td align="left">Telink | Chips for a Smarter IoT (telink-semi.com)<br><a href="https://www.telink-semi.cn/" target="_blank">Telink中文官网</a></td>    </tr>    <tr>        <td align="center" rowspan="5">开发手册</td>        <td align="left"><a href="https://help.aliyun.com/zh/alios-things/" target="_blank">AliOS Things开发指南</a></td>        <td align="left">AliOS Things开发指南，这里是最新版本，可以直接从官网找到</td>    </tr>     <tr>        <td align="left"><a href="https://haas.iot.aliyun.com/aliosthings/index.html" target="_blank">AliOS Things开发指南</a></td>        <td align="left">AliOS Things应用开发指南，这里应该是3.3版本的完整开发文档</td>    </tr>    <tr>        <td align="left"><a href="https://gaic.alicdn.com/aic/h5_daily/test/aliosthings/3.0.13/index.html" target="_blank">AliOS Things开发指南(3.0)</a></td>        <td align="left">AliOS Things应用开发指南，这里应该是3.0版本的完整开发文档</td>    </tr>    <tr>        <td align="left"><a href="https://help.aliyun.com/product/123207.html?spm=a2c4g.11186623.6.540.114e60d84sF58G" target="_blank">生活物联网平台开发文档</a></td>        <td align="left">生活物联网平台（飞燕平台）开发文档<br><a href="https://help.aliyun.com/document_detail/180778.html?spm=a2c4g.123207.0.0.49556adcO5apvd" target="_blank">《设备端开发指南》</a></td>    </tr>    <tr>        <td align="left"><a href="https://doc-bot.tmall.com/docs/doc.htm?spm=0.7629140.0.0.7bf81780UN7WkQ&treeId=578&articleId=118057&docType=1" target="_blank">Wi-Fi IoT品类定义与功能开发</a></td>        <td align="left">天猫精灵IoT开放平台——Wi-Fi IoT品类定义与功能开发</td>    </tr>    <tr>        <td align="center" rowspan="3">硬件平台</td>        <td align="left"><a href="https://developer.aliyun.com/article/761644?spm=a2c6h.12873581.0.dArticle761644.1c1b589dRHgvcR&groupCode=genieaiot" target="_blank">mk3080 WiFi开发板</a></td>        <td align="left">WiFi开发板使用指南-阿里云开发者社区</td>    </tr>    <tr>        <td align="left"><a href="http://www.taichi-maker.com/homepage/esp8266-nodemcu-iot/esp8266-nodemcu-tutorial-index/" target="_blank">esp8266开发板</a></td>        <td align="left">一个教程：ESP8266-NodeMCU开发板详解-太极创客 (taichi-maker.com)</td>    </tr>    <tr>        <td align="left"><a href="https://wiki.telink-semi.cn/doc/ds/DS_TLSR8258-E_Datasheet%20for%20Telink%20BLE+IEEE802.15.4%20Multi-Standard%20Wireless%20SoC%20TLSR8258.pdf" target="_blank">TLSR8258 Datasheet</a></td>        <td align="left">Datasheet for Telink BLE + IEEE802.15.4 MultiStandard Wireless SoC TLSR8258</td>    </tr>    <tr>        <td align="center" rowspan="2">参考资料</td>        <td align="left"><a href="https://developer.aliyun.com/article/720516#" target="_blank">AliOS Things 3.0 应用开发指南</a></td>        <td align="left">这个只是一篇参考文章，里面是一些环境搭建相关的，可以参考</td>    </tr>    <tr>        <td align="left"><a href="https://info.support.huawei.com/info-finder/encyclopedia/zh/index.html" target="_blank">IP知识百科 - 华为 (huawei.com)</a></td>        <td align="left">IP的一些相关知识点</td>    </tr></table>
              </div>
            </details>

<details class="folding-tag" blue><summary> 点击查看相关文件下载 </summary>
              <div class='content'>
              <table>    <tr>        <td align="center" width=150px>分类</td>        <td align="center">网址</td>        <td align="center">说明</td>    </tr>    <tr>        <td align="left" rowspan="6">蓝牙规范相关文档</td>        <td align="left"><a href="https://www.bluetooth.com/zh-cn/specifications/specs/core-specification-5-2/" target="_blank">Core Specification 5.2</a></td>        <td align="left">核心规格 5.2，该规范定义了创建可互操作的Bluetooth 设备所需的技术。                        <br><a href="./蓝牙参考资料/Core_v5.2.pdf" target="_blank">《Core_v5.2.pdf》</a></td>      </tr>    <tr>        <td align="left"><a href="https://www.bluetooth.com/zh-cn/specifications/specs/mesh-model-1-1/" target="_blank">Mesh Model(v1.1)</a></td>        <td align="left">本Bluetooth 规范定义了模型（以及它们所需的状态和消息），这些模型用于在mesh 网络中的节点上执行基本功能，超出了Bluetooth Mesh 配置文件 规范中定义的基础模型。                        <br>本规范包括定义跨设备类型标准功能的通用模型，以及支持关键mesh 场景的模型，如照明控制、传感器、时间和场景。                        <br><a href="./蓝牙参考资料/MshMDL_v1.1.pdf" target="_blank">《MshMDL_v1.1.pdf》</a></td>      </tr>    <tr>        <td align="left"><a href="https://www.bluetooth.com/zh-cn/specifications/specs/mesh-profile-1-0-1/" target="_blank">Mesh Profile(v1.0.1)</a></td>        <td align="left">该Bluetooth 规范定义了基本要求，以实现可互操作的mesh 网络解决方案，用于Bluetooth 低能量无线技术。                        <br><a href="./蓝牙参考资料/MshPRFv1.0.1.pdf" target="_blank">《MshPRFv1.0.1.pdf》</a></td>      </tr>    <tr>        <td align="left"><a href="https://www.bluetooth.com/zh-cn/specifications/device-properties/" target="_blank">Mesh Device Properties</a></td>        <td align="left">本规范包含Bluetooth Mesh 配置文件 和Bluetooth Mesh 模型规范所要求的设备属性的定义。                        <br>但是跟之前的有些区别，我主要看的之前的版本：<a href="./蓝牙参考资料/MeshDeviceProperties_v1.2.pdf" target="_blank">《MMeshDeviceProperties_v1.2.pdf》</a></td>      </tr>    <tr>        <td align="left"><a href="https://www.bluetooth.com/specifications/gss/" target="_blank">GATT Specification Supplement</a></td>        <td align="left">GATT Specification Supplement | Bluetooth® Technology Website。                        <br>好像可以在线看：<a href="https://btprodspecificationrefs.blob.core.windows.net/gatt-specification-supplement/GATT_Specification_Supplement.pdf" target="_blank">《GATT Specification Supplement》</a></td>      </tr>     <tr>        <td align="left"><a href="https://www.bluetooth.com/specifications/assigned-numbers/" target="_blank">Assigned Numbers</a></td>        <td align="left">GATT的一些类型定义可以在这里找。</td>      </tr>    <tr>        <td align="left" rowspan="2">AliOS Things</td>        <td align="left"><a href="https://gitee.com/alios-things-admin/AliOS-Things" target="_blank">alios-things/AliOS-Things</a></td>        <td align="left">Gitee上的AliOSThings SDK源码仓库</td>      </tr>    <tr>        <td align="left"><a href="https://github.com/alibaba/AliOS-Things" target="_blank">alibaba/AliOS-Things</a></td>        <td align="left">GitHub上的AliOSThings SDK源码仓库</td>      </tr>    <tr>        <td align="left" rowspan="2">天猫精灵蓝牙Mesh协议栈</td>        <td align="left"><a href="https://github.com/alibaba-archive/genie-bt-mesh-stack" target="_blank">alibaba-archive/genie-bt-mesh-stack</a></td>        <td align="left">GitHub上的天猫精灵蓝牙Mesh协议栈源码仓库。<br>之前是在<a href="https://github.com/alibaba/genie-bt-mesh-stack"target="_blank">alibaba/genie-bt-mesh-stack</a>这个仓库。<br>写笔记的时候最新提交为<a href="https://github.com/alibaba-archive/genie-bt-mesh-stack/tree/faf523618a6a2560090fc423222b9db80984bb7a" target="_blank">faf523618a6a2560090fc423222b9db80984bb7a</a></td>      </tr>    <tr>        <td align="left"><a href="https://help.aliyun.com/document_detail/171552.html?spm=a2c4g.173310.0.0.55d6e992e8xJip" target="_blank">蓝牙Mesh设备开发指南</a></td>        <td align="left">阿里云生活服务平台开发手册——蓝牙设备开发一节中的内容</td>      </tr></table>
              </div>
            </details>

<p>为了有一个更加清晰的认识，我们这一节抓包分析一下。</p>
<h1 id="一、WiFi不配置密码"><a href="#一、WiFi不配置密码" class="headerlink" title="一、WiFi不配置密码"></a><font size=3>一、WiFi不配置密码</font></h1><p>我们先看一下WiFi不带密码的话，配网过程是怎样的，因为路由器不设置WiFi密码的话，传输过程中的数据包都是明文传输，我们都是可以通过抓包软件抓取并看到内容的。</p>
<h2 id="1-路由器配置"><a href="#1-路由器配置" class="headerlink" title="1. 路由器配置"></a><font size=3>1. 路由器配置</font></h2><p>我们进入路由器的配置页面（一个IP地址），一般路由器机身或者说明书上都有：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219121752582.png" alt="image-20231219121752582"  />

<p>我们输入路由器的用户名和密码，就会进入路由器管理界面，我们打开无线设置：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219122208782.png" alt="image-20231219122208782" />

<p>我们配置路由器的信道为6，无线名称（SSID）为dlink，由于路由器比较老，所以只支持802.11g。不配置加密，所以passwd就没有，长度就是0。</p>
<h2 id="2-OmniPeek设置"><a href="#2-OmniPeek设置" class="headerlink" title="2. OmniPeek设置"></a><font size=3>2. OmniPeek设置</font></h2><h3 id="2-1-channel配置"><a href="#2-1-channel配置" class="headerlink" title="2.1 channel配置"></a><font size=3>2.1 channel配置</font></h3><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219122409555.png" alt="image-20231219122409555" />

<p>我们这里只抓6信道就可以了，因为前面路由器已经配置了信道为6。</p>
<h3 id="2-2-过滤器"><a href="#2-2-过滤器" class="headerlink" title="2.2 过滤器"></a><font size=3>2.2 过滤器</font></h3><p>我们要抓到自己需要的Smart Config报文，我们需要配置一下过滤器，怎么设置过滤器？我们要根据smart config报文的特点来抓。</p>
<ul>
<li><p>首先，报文是手机发送到路由器的，所以我们需要我们查一下手机的mac地址。手机的mac地址在手机的设置里面应该都有。</p>
</li>
<li><p>然后我们知道手机发送的smart config报文数据是一个广播报文，它使用的是255.255.255.255广播地址，在下面，也会有mac广播地址，mac的广播地址为 FF:FF:FF:FF:FF:FF 。</p>
</li>
<li><p>smart config的数据报文是802.11的数据报文，所以过滤器的协议就可以选择802.11Data类型：</p>
</li>
</ul>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219123304844.png" alt="image-20231219123304844" />

<p>综上所述，过滤器参数如下所示：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219123400149.png" alt="image-20231219123400149" />

<p>然后我们使用这个过滤器，开始抓包即可。</p>
<h2 id="3-手机操作"><a href="#3-手机操作" class="headerlink" title="3. 手机操作"></a><font size=3>3. 手机操作</font></h2><p>首先，手机要接入WiFi，然后我们打开手机的天猫精灵，扫描我们物联网设备的配网二维码（<a target="_blank" rel="noopener" href="https://living.aliyun.com/project/a123DX2ltns1lpTf/dev/product/a1BzTBsjEp4/Interact/product_manual">产品管理 - 生活物联网平台 (aliyun.com)</a>）：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219123550964.png" alt="image-20231219123550964" style="zoom:50%;" />

<p>然后OmniPeek中应该就会抓到手机和路由器之间的smart config相关的包了：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219123941127.png" alt="image-20231219123941127" />

<p>像这种IP地址是255.255.255.255的包才是我们的smart config配网报文。</p>
<h2 id="4-数据包分析"><a href="#4-数据包分析" class="headerlink" title="4. 数据包分析"></a><font size=3>4. 数据包分析</font></h2><p>我们准备一个表格来记录每次收到的数据：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221635784.png" alt="image-20231219221635784" />

<h3 id="4-1-起始帧：1314"><a href="#4-1-起始帧：1314" class="headerlink" title="4.1 起始帧：1314"></a><font size=3>4.1 起始帧：1314</font></h3><p>我们前面知道配网过程中的WiFi报文起始帧的Length&#x3D;0x4E0&#x3D;1248，这也就意味着，我们起始帧的总长度为1248字节，我们上面抓到的包似乎没有长度为1248的，我们知道WiFi报文发出去的时候肯定是不可能只有起始帧的，还要经过其他的一些封装过程，会增加以下头部之类的。我们点开那个最长的1314的看一下：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219124834992.png" alt="image-20231219124834992" />

<p>我们会发现，报文里面有一个Application Layer，里面的数据长度刚好就是1248字节，所以这个就是我们的起始帧啦。在抓包过程中，数据包可能会抓到多次，数据包也可能没抓到，当不符合我们前面学习的规则的时候，就继续往后找就可以了。</p>
<h3 id="4-2-数据帧：333"><a href="#4-2-数据帧：333" class="headerlink" title="4.2 数据帧：333"></a><font size=3>4.2 数据帧：333</font></h3><p>我们来看一下下面的这个长度为333的报文：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219125348899.png" alt="image-20231219125348899" />

<p>可以看到这个数据长度为267字节，十六进制就是0x10B，比对数据帧的Index取值，那么Index&#x3D;0x100，Value &#x3D; 0x10B-0x100 &#x3D; B。</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221726938.png" alt="image-20231219221726938" />

<h3 id="4-3-数据帧：465"><a href="#4-3-数据帧：465" class="headerlink" title="4.3 数据帧：465"></a><font size=3>4.3 数据帧：465</font></h3><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219125930807.png" alt="image-20231219125930807" />

<p>可以看到这个数据长度为399字节，十六进制就是0x18F，比对数据帧的Index取值，那么Index&#x3D;0x180，Value &#x3D; 0x18F-0x180 &#x3D; F。</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221758836.png" alt="image-20231219221758836" />

<h3 id="4-4-数据帧：583"><a href="#4-4-数据帧：583" class="headerlink" title="4.4 数据帧：583"></a><font size=3>4.4 数据帧：583</font></h3><p>我们先看这个583的：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219130314255.png" alt="image-20231219130314255" />

<p>可以看到这个数据长度为517字节，十六进制就是0x205，比对数据帧的Index取值，那么Index&#x3D;0x200，Value &#x3D; 0x205-0x200 &#x3D; 5。可以看到这个对应的SSID名字，我们的WiFi名称为dlink，刚好就是5.</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221830583.png" alt="image-20231219221830583" />

<h3 id="4-5-数据帧：706"><a href="#4-5-数据帧：706" class="headerlink" title="4.5 数据帧：706"></a><font size=3>4.5 数据帧：706</font></h3><p>我们先看一下这个902数据包：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219130557461.png" alt="image-20231219130557461" />

<p>可以看到这个数据长度为836字节，十六进制就是0x344，比对数据帧的Index取值，0x344-0x280的值已经超出了一个字节长度。下一个应该是0x280附近的才对，这里直接0x344，说明他的Index应该是0x300。这就说明中间我们可能少抓了一个包，那么我们就继续往下翻，找找看：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219131058393.png" alt="image-20231219131058393" />

<p>可以看到这个数据长度为640字节，十六进制就是0x280，比对数据帧的Index取值，那么Index&#x3D;0x280，Value &#x3D; 0x280-0x280 &#x3D; 0。可以看到这里表示的事Passwd Len字段，也就是密码的长度，我们得出为0，之前我们的路由器是不加密的，没有密码，所以这里也就对上了。</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219221917411.png" alt="image-20231219221917411" />

<h3 id="4-6-数据帧：902"><a href="#4-6-数据帧：902" class="headerlink" title="4.6 数据帧：902"></a><font size=3>4.6 数据帧：902</font></h3><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219131438036.png" alt="image-20231219131438036" />

<p>可以看到这个数据长度为836字节，十六进制就是0x344，比对数据帧的Index取值，那么Index&#x3D;0x300，Value &#x3D; 0x344-0x300 &#x3D; 44。</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219222123867.png" alt="image-20231219222123867" />

<p>这里其实是有问题的，我们看一下这个44，十进制是68，这里的Token Len长度为68字节嘛？我们看后面的Token，实际规定是8字节，68显然，这里的68并非指Token Len，其实前面学习数据结构的时候有一张图，上面其实也是没有这个Token Len的，具体为什么，暂时我也不知道，后面再补充吧。貌似是因为这个Flag字段的值，没有找到Flag字段的值的含义，这里先这样吧。</p>
<p>这个68不是Token Len的话，它是啥？我们继续往后看，假设它是SSID，那么根据规则，这个值需要加上32，那么就是100，我们看一下ASCII码表，100就表示字母d，我们WiFi的首字母刚好就是d，所以是这样对应的：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219222803843.png" alt="image-20231219222803843"  />

<h3 id="4-7-数据帧：1038"><a href="#4-7-数据帧：1038" class="headerlink" title="4.7 数据帧：1038"></a><font size=3>4.7 数据帧：1038</font></h3><p>再往下是这个581：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219223039760.png" alt="image-20231219223039760" />

<p>对应的Length&#x3D;517，其实跟前面重复了，接下来是704，但是其实一看就知道它是不对的，因为上面我们的索引是往下发，越来越大的，这个比上面的902还小，肯定是有问题的：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219223338720.png" alt="image-20231219223338720" />

<p>可以看到，它的Length&#x3D;640，跟前面还是重复了，接卸下来我们来看这个1038的：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219223503649.png" alt="image-20231219223503649" />

<p>以看到这个数据长度为972字节，十六进制就是0x3CC，比对数据帧的Index取值，那么Index&#x3D;0x380，Value &#x3D; 0x3CC-0x380 &#x3D; 0x4C&#x3D;76。我们把这个76加上32，得到了108，它对应ASCII码的小写字母l，所以有：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219223952467.png" alt="image-20231219223952467" />

<h3 id="4-8-总结"><a href="#4-8-总结" class="headerlink" title="4.8 总结"></a><font size=3>4.8 总结</font></h3><p>前面分析到1038的包，我们大概就知道SSID是怎么得来的了。我们在寻找包的时候，由于索引是不断增大的，所以我们找的数据理论上也是不断增大才对，另外就是当索引达到0x480的时候会重新从0x100开始，这点需要注意，数据包其实都是有顺序的，我们抓的包可能有重复，也可能有丢包，我们发现异常的时候继续往后找就可以了。</p>
<p>需要注意的是，这里我们的WiFi是没有密码的，所以我们可以看到所有信息，那加密过的呢？我快慢看不到怎么办？我们后面就来尝试抓一下加密的WiFi在smart config配网过程中的包吧。</p>
<h1 id="二、WiFi配置密码"><a href="#二、WiFi配置密码" class="headerlink" title="二、WiFi配置密码"></a><font size=3>二、WiFi配置密码</font></h1><h2 id="1-路由器设置"><a href="#1-路由器设置" class="headerlink" title="1. 路由器设置"></a><font size=3>1. 路由器设置</font></h2><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219225250321.png" alt="image-20231219225250321" />

<p>还是和之前一样的配置方式，这里选择加密，并且配置好WiFi的密码。</p>
<h2 id="2-OmniPeek设置-1"><a href="#2-OmniPeek设置-1" class="headerlink" title="2. OmniPeek设置"></a><font size=3>2. OmniPeek设置</font></h2><p>channel和过滤器与上面的配置一样，然后开始抓包即可。</p>
<h2 id="3-手机操作-1"><a href="#3-手机操作-1" class="headerlink" title="3. 手机操作"></a><font size=3>3. 手机操作</font></h2><p>与上面操作流程一样。</p>
<h2 id="4-数据包分析-1"><a href="#4-数据包分析-1" class="headerlink" title="4. 数据包分析"></a><font size=3>4. 数据包分析</font></h2><p>这一次抓到的报文，全部都是加密数据了，这里只有mac地址，IP地址都不见了。</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219225821054.png" alt="image-20231219225821054" />

<p>这一次，我们其实什么有用的信息都看不到，那么怎么计算Length字段？我们根据前面的经验，我们的起始帧的Length长度为0x4E0，也就是1248。我们看前面呢么多的1334，我们猜测它是起始帧，我们用这个值减去1248，得到86，大概就可以得到前面一大堆的头部就是86字节，我们后面就直接计算差值来获取Length就可以啦。其实我们学过TCP&#x2F;IP协议，WiFi协议的话，理论上来说，我们应该是可以根据每一层封装来计算头部长度的，但是，水平不到，这里直接减法，等于是拿着结果推起因，能理解这个过程就可以啦。</p>
<h3 id="4-1-数据帧：362"><a href="#4-1-数据帧：362" class="headerlink" title="4.1 数据帧：362"></a><font size=3>4.1 数据帧：362</font></h3><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219230719632.png" alt="image-20231219230719632" />

<p>我们找一个短一些的，这里有个362，我们用362减去86，得到276，十六进制就是0x114，我们对应Index1可以得到Value&#x3D;0x114-0x100&#x3D;0x14：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219230941281.png" alt="image-20231219230941281" />

<h3 id="4-2-数据帧：485"><a href="#4-2-数据帧：485" class="headerlink" title="4.2 数据帧：485"></a><font size=3>4.2 数据帧：485</font></h3><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231201273.png" alt="image-20231219231201273" />

<p>我们用485减去86，得到276，十六进制就是0x18F，我们对应Index1可以得到Value&#x3D;0x18F-0x180&#x3D;0x0F：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231126893.png" alt="image-20231219231126893" />

<h3 id="4-3-数据帧：603"><a href="#4-3-数据帧：603" class="headerlink" title="4.3 数据帧：603"></a><font size=3>4.3 数据帧：603</font></h3><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231319816.png" alt="image-20231219231319816" />

<p>我们用603减去86，得到517，十六进制就是0x205，我们对应Index1可以得到Value&#x3D;0x205-0x200&#x3D;0x05：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231341838.png" alt="image-20231219231341838" />

<h3 id="4-4-数据帧：737"><a href="#4-4-数据帧：737" class="headerlink" title="4.4 数据帧：737"></a><font size=3>4.4 数据帧：737</font></h3><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231627171.png" alt="image-20231219231627171" />

<p>我们用737减去86，得到651，十六进制就是0x28B，我们对应Index1可以得到Value&#x3D;0x28B-0x280&#x3D;0x0B：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219231558890.png" alt="image-20231219231558890" />

<p>我们的密码不是12345678，这不才8个字节？怎么会是11？这是因为这里的WiFi密码是密文，是经过了8到6位格式转换的，后续我们还要对其进行解密才行。</p>
<h3 id="4-5-数据帧：922"><a href="#4-5-数据帧：922" class="headerlink" title="4.5 数据帧：922"></a><font size=3>4.5 数据帧：922</font></h3><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232113359.png" alt="image-20231219232113359" />

<p>我们用922减去86，得到836，十六进制就是0x344，我们对应Index1可以得到Value&#x3D;0x344-0x300&#x3D;0x44，这个数字很熟悉，上面我们解析过的，它转换后就代表字母d：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232218345.png" alt="image-20231219232218345" />

<h3 id="4-6-数据帧：1058"><a href="#4-6-数据帧：1058" class="headerlink" title="4.6 数据帧：1058"></a><font size=3>4.6 数据帧：1058</font></h3><img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232322933.png" alt="image-20231219232322933" />

<p>我们用1058减去86，得到972，十六进制就是0x3CC，我们对应Index1可以得到Value&#x3D;0x3CC-0x380&#x3D;0x4C，这个数字很熟悉，上面我们解析过的，它转换后就代表字母l：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232444261.png" alt="image-20231219232444261" />

<h3 id="4-7-总结"><a href="#4-7-总结" class="headerlink" title="4.7 总结"></a><font size=3>4.7 总结</font></h3><p>按照上面的方式，我们就可以一步一步得到SSID和密码，具体怎么解析密码，后面代码会介绍。</p>
<p>我们来找个规律，我们看一下上面1058字节长度的这个包：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219232838960.png" alt="image-20231219232838960" />

<p>前面一堆的头，然后是802.11加密数据(Encrypted Data)，这个加密数据长度为1020字节，1058-1020&#x3D;38。</p>
<p>我们再计算一个长度为922的包：</p>
<img data-src="https://fanhua-picture.oss-cn-hangzhou.aliyuncs.com/01%E5%B5%8C%E5%85%A5%E5%BC%8F%E5%BC%80%E5%8F%91/01HQ%E8%AF%BE%E7%A8%8B%E4%BD%93%E7%B3%BB/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/LV02-01-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT-07-SmartConfig-02-SmartConfig%E6%8A%93%E5%8C%85%E5%88%86%E6%9E%90/img/image-20231219233120730.png" alt="image-20231219233120730" />

<p>这个加密数据长度为884字节，922-884&#x3D;38。会发现都是38，我们用86减一下，可以得到86-38&#x3D;48，这48字节其实就是加密数据的报文头。</p>

    </div>

    
    
    

    <footer class="post-footer">




    <div>
        
            <div style="text-align:center;color: #ccc;font-size:14px;">
            ----------本文结束
            <i class="fas fa-fan fa-spin" style="color: #FF1493; font-size: 1rem"></i>
            感谢您的阅读----------
            </div>
        
    </div>





  
  <div class="my_post_copyright"> 
    <p><span>文章标题:</span><a href="/post/20e461a1.html">LV02-01-天猫精灵IOT-07-SmartConfig-02-SmartConfig抓包分析</a></p>
    <p><span>文章作者:</span><a href="/" title="欢迎访问 《苏木》 的学习笔记">苏木</a></p>
    <p><span>发布时间:</span>2023年12月22日 - 22:28</p>
    <p><span>最后更新:</span>2025年06月14日 - 00:25</p>
    <p><span>原始链接:</span><a href="/post/20e461a1.html" title="LV02-01-天猫精灵IOT-07-SmartConfig-02-SmartConfig抓包分析">https://sumumm.github.io/post/20e461a1.html</a></p>
    <p><span>许可协议:</span><i class="fab fa-creative-commons"></i> <a rel="license" href= "https://creativecommons.org/licenses/by-nc-nd/4.0/" target="_blank" title="Attribution-NonCommercial-NoDerivatives 4.0 International (CC BY-NC-ND 4.0)">署名-非商业性使用-禁止演绎 4.0 国际</a> 转载请保留原文链接及作者。</p>  
  </div>
  


          <div class="post-tags">
              <a href="/tags/LV21-%E5%A4%A9%E7%8C%AB%E7%B2%BE%E7%81%B5IOT/" rel="tag"><i class="fa fa-tag"></i> LV21-天猫精灵IOT</a>
          </div>

        

          <div class="post-nav">
            <div class="post-nav-item">
                <a href="/post/239fc2a7.html" rel="prev" title="LV02-01-天猫精灵IOT-07-SmartConfig-03-多播配网报文分析">
                  <i class="fa fa-angle-left"></i> LV02-01-天猫精灵IOT-07-SmartConfig-03-多播配网报文分析
                </a>
            </div>
            <div class="post-nav-item">
                <a href="/post/5122fd7.html" rel="next" title="LV02-01-天猫精灵IOT-07-SmartConfig-01-SmartConfig简介">
                  LV02-01-天猫精灵IOT-07-SmartConfig-01-SmartConfig简介 <i class="fa fa-angle-right"></i>
                </a>
            </div>
          </div>
    </footer>
  </article>
</div>






</div>
  </main>

  <footer class="footer">
    <div class="footer-inner">

  <div class="copyright">
    &copy; 2017 – 
    <span itemprop="copyrightYear">2025</span>
    <span class="with-love">
      <i class="fa fa-heart"></i>
    </span>
    <span class="author" itemprop="copyrightHolder">苏木</span>
  </div>
<div class="wordcount">
  <span class="post-meta-item">
    <span class="post-meta-item-icon">
      <i class="fa fa-chart-line"></i>
    </span>
      <span>站点总字数：</span>
    <span title="站点总字数">3.7m</span>
  </span>
  <span class="post-meta-item">
    <span class="post-meta-item-icon">
      <i class="fa fa-coffee"></i>
    </span>
      <span>站点阅读时长 &asymp;</span>
    <span title="站点阅读时长">225:26</span>
  </span>
</div>




    <span id="sitetime"></span>
    <script defer language=javascript>
        function siteTime()
        {
            window.setTimeout("siteTime()", 1000);
            var seconds = 1000;
            var minutes = seconds * 60;
            var hours = minutes * 60;
            var days = hours * 24;
            var years = days * 365;
            var today = new Date();
            var todayYear = today.getFullYear();
            var todayMonth = today.getMonth()+1;
            var todayDate = today.getDate();
            var todayHour = today.getHours();
            var todayMinute = today.getMinutes();
            var todaySecond = today.getSeconds();
            /*==================================================
            Date.UTC() -- 返回date对象距世界标准时间(UTC)1970年1月1日午夜之间的毫秒数(时间戳)
            year        - 作为date对象的年份，为4位年份值
            month       - 0-11之间的整数，做为date对象的月份
            day         - 1-31之间的整数，做为date对象的天数
            hours       - 0(午夜24点)-23之间的整数，做为date对象的小时数
            minutes     - 0-59之间的整数，做为date对象的分钟数
            seconds     - 0-59之间的整数，做为date对象的秒数
            microseconds - 0-999之间的整数，做为date对象的毫秒数
            ==================================================*/
            var t1 = Date.UTC(2017, 
                              5, 
                              19, 
                              0, 
                              0, 
                              0); //北京时间
            var t2 = Date.UTC(todayYear,todayMonth,todayDate,todayHour,todayMinute,todaySecond);
            var diff = t2-t1;
            var diffYears = Math.floor(diff/years);
            var diffDays = Math.floor((diff/days)-diffYears*365);
            var diffHours = Math.floor((diff-(diffYears*365+diffDays)*days)/hours);
            var diffMinutes = Math.floor((diff-(diffYears*365+diffDays)*days-diffHours*hours)/minutes);
            var diffSeconds = Math.floor((diff-(diffYears*365+diffDays)*days-diffHours*hours-diffMinutes*minutes)/seconds);
            document.getElementById("sitetime").innerHTML="已在这里 "+diffYears+" 年 "+diffDays+" 天 "+diffHours+" 小时 "+diffMinutes+" 分钟 "+diffSeconds+" 秒";
        }
        siteTime();
    </script>



    </div>
  </footer>

  
  <div class="back-to-top" role="button" aria-label="返回顶部">
    <i class="fa fa-arrow-up fa-lg"></i>
    <span>0%</span>
  </div>
  <div class="reading-progress-bar"></div>

<noscript>
  <div class="noscript-warning">Theme NexT works best with JavaScript enabled</div>
</noscript>


  
  <script src="https://cdnjs.cloudflare.com/ajax/libs/animejs/3.2.1/anime.min.js" integrity="sha256-XL2inqUJaslATFnHdJOi9GfQ60on8Wx1C2H8DYiN1xY=" crossorigin="anonymous"></script>
  <script src="https://cdnjs.cloudflare.com/ajax/libs/next-theme-pjax/0.6.0/pjax.min.js" integrity="sha256-vxLn1tSKWD4dqbMRyv940UYw4sXgMtYcK6reefzZrao=" crossorigin="anonymous"></script>
  <script src="https://cdnjs.cloudflare.com/ajax/libs/fancyapps-ui/5.0.28/fancybox/fancybox.umd.js" integrity="sha256-ytMJGN3toR+a84u7g7NuHm91VIR06Q41kMWDr2pq7Zo=" crossorigin="anonymous"></script>
  <script src="https://cdnjs.cloudflare.com/ajax/libs/lozad.js/1.16.0/lozad.min.js" integrity="sha256-mOFREFhqmHeQbXpK2lp4nA3qooVgACfh88fpJftLBbc=" crossorigin="anonymous"></script>
<script src="/js/comments.js"></script><script src="/js/utils.js"></script><script src="/js/motion.js"></script><script src="/js/next-boot.js"></script><script src="/js/pjax.js"></script>

  <script src="https://cdnjs.cloudflare.com/ajax/libs/hexo-generator-searchdb/1.4.1/search.js" integrity="sha256-1kfA5uHPf65M5cphT2dvymhkuyHPQp5A53EGZOnOLmc=" crossorigin="anonymous"></script>
<script src="/js/third-party/search/local-search.js"></script>




  <script src="/js/third-party/fancybox.js"></script>

  <script src="/js/third-party/pace.js"></script>


  




  

  <script class="next-config" data-name="enableMath" type="application/json">true</script><script class="next-config" data-name="mathjax" type="application/json">{"enable":true,"tags":"none","js":{"url":"https://cdnjs.cloudflare.com/ajax/libs/mathjax/3.2.2/es5/tex-mml-chtml.js","integrity":"sha256-MASABpB4tYktI2Oitl4t+78w/lyA+D7b/s9GEP0JOGI="}}</script>
<script src="/js/third-party/math/mathjax.js"></script>


 
        <div id="click-show-text"
            data-mobile = false
            data-text = 富强,民主,文明,和谐,自由,平等,公正,法制,爱国,敬业,诚信,友善
            data-fontsize = 15px
            data-random= false>
        </div>
       

      
        <script async src=https://cdn.jsdelivr.net/npm/hexo-next-mouse-effect@latest/click/showText.js></script>
      

      
    




    <script async src="/js/fancybox_param.js"></script>





<!-- APlayer本体 -->



</body>
</html>
